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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
eamed patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )^ Responsive to communication(s) filed on 04 November 2008 . 
2a )□ This action is FINAL. 2b)|3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 35-42.44-50 and 52-82 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) |EI Claim(s) 35-42.44-50 and 52-82 is/are rejected. 
/)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: a)^ accepted or b)^ objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 !)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)n All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . In view of tine Appeal filed on 04/1 0/2008, PROSECUTION IS HEREBY 
REOPENED. A New Ground of Rejection is set forth below. 

To avoid abandonment of the application, appellant must exercise one of the 
following two options: 

(1) file a reply under 37 CFR 1.111 (if this Office action is non-final) or a reply 
under 37 CFR 1 .1 13 (if this Office action is final); or, 

(2) initiate a new appeal by filing a notice of appeal under 37 CFR 41 .31 followed 
by an appeal brief under 37 CFR 41 .37. The previously paid notice of appeal fee and 
appeal brief fee can be applied to the new appeal. If, however, the appeal fees set forth 
in 37 CFR 41 .20 have been increased since they were previously paid, then appellant 
must pay the difference between the increased fees and the amount previously paid. 

A Supervisory Patent Examiner (SPE) has approved of reopening prosecution by 
signing below: 

/saleh najjar/ 

Supervisory Patent Examiner, Art Unit 2455 



Claim Rejections - 35 USC §102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
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A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by 
another filed in the United States before the invention thereof by the applicant for patent, 
or on an international application by another who has fulfilled the requirements of 
paragraphs (1), (2), and (4) of section 371(c) of this title before the invention thereof by 
the applicant for patent. 

3. Claims 35-42, 44-50, 52-82, are rejected under 35 U.S.C. 102(e) as being 
anticipated by Perlman et al., (referred to hereinafter as Perlman) U.S. Patent No. 
7,395,549. 

Perlman relates to providing security in communications across computer 
networks. More specifically, Perlman relates to a method and an apparatus for providing 
a l<ey distribution center for clients and servers on a computer network that operates 
without having to store long-term server secrets. 

4. As to claim 35, Perlman teaches an authentication system, comprising: 
an access controller operable to communicate with a client via a first 

communication medium (refer to Fig. 5, col. 7, lines 2-12); and 

an authentication server operable to communicate with said client and said 
access controller via a second communication medium and further operable to deliver a 
first key to said client and a second key to said access controller (refer to Fig. 2 and col. 

5. lines 35 - col. 6, lines 3 for illustrating the communication between the KDC and the 
server and Fig. 4, col. 6, lines 50 - col. 7, line 1 , for the illustrating the communication 
between a client and KDC ), said second key being complementary to said first key 
such that when said client and said access controller are connected, communications 
there between can be encrypted using said keys; and wherein said access controller is 
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operable to selectively pass instructions received from said client to a computer 
attached to said access controller if a verification protocol utilizing said keys is met 
(refer to Fig. 5, col. 7, lines 2-12, for illustrating the communication between the client 
and the server using the assigned keys); 

wherein said first key is delivered to said client only if a user operating said client 
authenticates said user's identity with said server (col. 1, lines 38-54, clients have to 
authenticate to the KDC in order to obtain the session key). 

5. As to claim 36, Perlman teaches the authentication .system according to claim 
35, wherein said authentication server is operable to generate said first key and said 
second key (col. 5, lines 35 - col. 6, lines 3 and col. 6, lines 50 - col. 7, line 1 ). 

6. As to claim 37, Perlman teaches the authentication system according to claim 35, 
wherein said first key is a public encryption key and said second key is a private 
encryption key complementary to said public encryption key (col. 5, lines 35 - col. 6, 
lines 3 and col. 6, lines 50 - col. 7, line 1 ). 

7. As to claim 38, Perlman teaches the authentication system according to claim 35, 
wherein each of said first communication medium and said second communication 
medium is selected from the group of networks consisting of the Internet, the PSTN, a 
local area network, and a wireless network (col. 4, lines 30-35). 

8. As to claim 39, Perlman teaches the authentication system according to claim 35 
wherein said computer is a telecommunications switch (col. 4, lines 36-44). 

9. As to claim 40, Perlman teaches the authentication system according to claim 35, 
wherein said verification protocol includes a generation of a random number by said 
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client, an encryption of said random number by said client using said first key, a delivery 
of said random number and said encrypted random number from said client to said 
access controller, a decryption of said encrypted random number using said second key 
by said access controller, a comparison of said random number and said decrypted 
number, and a decision to pass at least a portion of said instructions if said comparison 
finds a match of said random number with said decrypted number, and a decision not to 
pass said at least a portion of said instructions if no match is found (col. 7, lines 2-12). 

1 0. As to claim 41 , Perlman teaches the authentication system according to claim 35, 
wherein said instructions are encrypted by said client using said first key and said 
verification protocol is based on a successful decryption of said instructions by said 
access controller using said second key(col. 7, lines 2-12). 

11. As to claim 42, Perlman teaches the authentication system according to claim 35, 
wherein said first key is delivered to said client only after said second key has been 
successfully delivered to said access controller (col. 5, lines 35 - col. 6, lines 3). 

12. As to claim 44, Perlman teaches the authentication system according to claim 35 
wherein said access controller contains a preset second key and said authentication 
server maintains a record of said preset second key; said authentication server 
operable to deliver said first key and said second key only if said access controller 
successfully transmits said preset second key to said authentication server and said 
transmitted preset second key matches said authentication server's record thereof (col. 
5, lines 35 - col. 6, lines 3). 
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1 3. Claims 45-50, 52-55, 58-69, and 74-82 do not teach or define any new limitations 
beyond the claims above, therefore, they are rejected for similar reasons. 

14. As to claims 56-57 and 70-71 dealing with the an updated first and second key 
(refer to (refer to Fig. 2 and col. 5, lines 35 - col. 6, lines 3 for illustrating the 
communication between the KDC and the server and Fig. 4, col. 6, lines 50 - col. 7, line 
1 , for the illustrating the communication between a client and KDC. The session key is 
assigned for a temporary period and set to expire; communication thereafter would 
require another session key to be created or an updated session key). 

1 5. As to claim 72-73 dealing with expiration of the verification protocol refer to col. 
6, lines 33-44, where an expiration is set for the temporary session key and if the time 
expires then access to the server is denied. 

Response to Arguments 

16. Applicants' arguments have been fully considered however they are deemed 
moot in view of the new ground(s) of rejection. 

Contact Information 

1 7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shawki S Ismail whose telephone number is 571-272- 
3985. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Saleh Najjar can be reached at 571-272-4006. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 

Patent Application Information Retrieval (PAIR) system. Status information for 

published applications may be obtained from either Private PAIR or Public PAIR. 

Status information for unpublished applications is available through Private PAIR only. 

For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic 

Business Center (EBC) at 866-217-9197 (toll-free). 

/Shawki S Ismail/ 
Examiner, Art Unit 2455 
January 29, 2009 
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